dfaggioli/qemu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
32,473 Commits 59 Branches 1,031 Tags
a890a2f9137ac3cf5b607649e66a6f3a5512d8dc
Go to file
Clone
Open with VS Code Open with VSCodium Open with Intellij IDEA
Download ZIP Download TAR.GZ Download BUNDLE
Michael S. Tsirkin a890a2f913 virtio: validate config_len on load 
Malformed input can have config_len in migration stream
exceed the array size allocated on destination, the
result will be heap overflow.

To fix, that config_len matches on both sides.

CVE-2014-0182

Reported-by: "Dr. David Alan Gilbert" <dgilbert@redhat.com>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Juan Quintela <quintela@redhat.com>

--

v2: use %ix and %zx to print config_len values
Signed-off-by: Juan Quintela <quintela@redhat.com>
2014-05-05 22:15:03 +02:00
audio
Add the ability to vary Spice playback and record rates, to facilitate Opus support.
2014-02-03 11:05:15 +01:00
backends
backends/baum.c: Fix compilation when SDL is not available.
2014-03-24 17:47:29 +00:00
block
curl: Fix hang reading from slow connections
2014-04-30 16:34:21 +02:00
bsd-user
cpu: Move opaque field from CPU_COMMON to CPUState
2014-03-13 19:20:47 +01:00
default-configs
usb: mtp filesharing
2014-04-23 10:28:14 +02:00
disas
libvixl: Fix format strings for several int64_t values
2014-03-10 14:56:29 +00:00
docs
savevm: Ignore minimum_version_id_old if there is no load_state_old
2014-05-05 22:15:03 +02:00
dtc @ bc895d6d09
dtc: add submodule
2013-04-18 13:50:53 +02:00
fpu
softfloat: Introduce float32_to_uint64_round_to_zero
2014-04-08 11:20:00 +02:00
fsdev
virtfs-proxy-helper: fix call to accept
2014-04-28 08:55:32 +04:00
gdb-xml
target-arm: Support fp registers in gdb stub
2013-12-17 19:42:32 +00:00
hw
virtio: validate config_len on load
2014-05-05 22:15:03 +02:00
include
vmstate: s/VMSTATE_INT32_LE/VMSTATE_INT32_POSITIVE_LE/
2014-05-05 22:15:03 +02:00
libcacard
Add a 'name' parameter to qemu_thread_create
2014-03-09 21:09:38 +02:00
linux-headers
linux-headers update
2014-04-25 12:59:57 +02:00
linux-user
target-arm: Define exception record for AArch64 exceptions
2014-04-17 21:34:03 +01:00
net
Merge remote-tracking branch 'remotes/mjt/tags/trivial-patches-2014-04-28' into staging
2014-04-28 13:43:17 +01:00
pc-bios
Add QEMU logo (SVG file)
2014-04-28 08:55:31 +04:00
pixman @ 97336fad32
qapi: move include files to include/qobject/
2012-12-19 08:31:31 +01:00
po
po: add proper Language: tags to .po files
2014-04-28 08:55:32 +04:00
qapi
qerror.h: Remove QERR defines that are only used once
2014-04-25 09:19:59 -04:00
qga
qga: trivial fix for unclear documentation of guest-set-time
2014-04-18 10:33:36 +04:00
qobject
qerror.h: Remove QERR defines that are only used once
2014-04-25 09:19:59 -04:00
qom
qerror.h: Remove QERR defines that are only used once
2014-04-25 09:19:59 -04:00
roms
pseries: Update SLOF firmware image to qemu-slof-20140404
2014-04-08 11:20:00 +02:00
scripts
scripts: add sample model file for Coverity Scan
2014-04-18 10:33:36 +04:00
slirp
slirp: Remove default_mon usage
2014-04-25 09:19:58 -04:00
stubs
qerror.h: Replace QERR_NOT_SUPPORTED with QERR_UNSUPPORTED
2014-04-25 09:19:59 -04:00
sysconfigs/target
Eliminate cpus-x86_64.conf file
2012-09-21 15:12:58 +02:00
target-alpha
target-alpha: Remove cpu_unique, cpu_sysval, cpu_usp
2014-04-17 11:47:42 -07:00
target-arm
vmstate: s/VMSTATE_INT32_LE/VMSTATE_INT32_POSITIVE_LE/
2014-05-05 22:15:03 +02:00
target-cris
cputlb: Change tlb_set_page() argument to CPUState
2014-03-13 19:52:47 +01:00
target-i386
target-i386: reorder fields in cpu/msr_hyperv_hypercall subsection
2014-04-05 10:49:05 +01:00
target-lm32
cputlb: Change tlb_set_page() argument to CPUState
2014-03-13 19:52:47 +01:00
target-m68k
cputlb: Change tlb_set_page() argument to CPUState
2014-03-13 19:52:47 +01:00
target-microblaze
cputlb: Change tlb_set_page() argument to CPUState
2014-03-13 19:52:47 +01:00
target-mips
target-mips: Avoid shifting left into sign bit
2014-03-27 19:22:49 +04:00
target-moxie
cputlb: Change tlb_set_page() argument to CPUState
2014-03-13 19:52:47 +01:00
target-openrisc
cputlb: Change tlb_set_page() argument to CPUState
2014-03-13 19:52:47 +01:00
target-ppc
ppc: use kvm_vcpu_enable_cap()
2014-04-30 14:39:58 +02:00
target-s390x
s390x: use kvm_vcpu_enable_cap()
2014-04-30 14:39:49 +02:00
target-sh4
cputlb: Change tlb_set_page() argument to CPUState
2014-03-13 19:52:47 +01:00
target-sparc
target-sparc: fix 32bit integer division overflow
2014-03-26 23:40:40 +00:00
target-unicore32
cputlb: Change tlb_set_page() argument to CPUState
2014-03-13 19:52:47 +01:00
target-xtensa
cputlb: Change tlb_set_page() argument to CPUState
2014-03-13 19:52:47 +01:00
tcg
tcg-sparc: Accept stores of zero
2014-04-28 11:06:35 -07:00
tests
Merge remote-tracking branch 'remotes/kevin/tags/for-upstream' into staging
2014-05-02 10:50:58 +01:00
trace
osdep: initialize glib threads in all QEMU tools
2014-03-25 13:39:31 +01:00
ui
Merge remote-tracking branch 'remotes/kraxel/tags/pull-gtk-6' into staging
2014-05-01 14:17:33 +01:00
util
Merge remote-tracking branch 'remotes/mjt/tags/trivial-patches-2014-04-28' into staging
2014-04-28 13:43:17 +01:00
.exrc
qemu: add .exrc
2012-09-07 09:02:44 +03:00
.gitignore
gitignore: cleanups #2
2014-04-28 08:55:31 +04:00
.gitmodules
Add OpenHack'Ware submodule
2014-03-12 17:26:32 +01:00
.mailmap
Update mailmap
2013-09-05 09:40:31 -05:00
.travis.yml
.travis.yml: add IRC notifications for build failures
2014-03-15 13:54:18 +04:00
aio-posix.c
aio: make aio_poll(ctx, true) block with no fds
2013-12-06 16:53:51 +01:00
aio-win32.c
aio: make aio_poll(ctx, true) block with no fds
2013-12-06 16:53:51 +01:00
arch_init.c
XBZRLE: Fix qemu crash when resize the xbzrle cache
2014-03-08 22:22:34 +01:00
async.c
aio: add aio_context_acquire() and aio_context_release()
2014-03-13 14:42:24 +01:00
balloon.c
softmmu: move include files to include/sysemu/
2012-12-19 08:32:45 +01:00
block-migration.c
block: Handle error of bdrv_getlength in bdrv_create_dirty_bitmap
2014-04-22 11:57:02 +02:00
block.c
block: Fix open_flags in bdrv_reopen()
2014-04-30 11:05:00 +02:00
blockdev-nbd.c
nbd: use BlockDriverState refcnt
2013-09-06 15:25:08 +02:00
blockdev.c
Merge remote-tracking branch 'remotes/qmp-unstable/queue/qmp' into staging
2014-04-28 12:56:34 +01:00
blockjob.c
qerror.h: Replace QERR_NOT_SUPPORTED with QERR_UNSUPPORTED
2014-04-25 09:19:59 -04:00
bt-host.c
sysemu: avoid proliferation of include/ subdirectories
2013-04-15 18:19:25 +02:00
bt-vhci.c
sysemu: avoid proliferation of include/ subdirectories
2013-04-15 18:19:25 +02:00
Changelog
Use qemu-project.org domain name
2013-10-11 09:34:56 -07:00
CODING_STYLE
CODING_STYLE: Section about mixed declarations
2014-03-27 19:22:49 +04:00
configure
configure: Re-run make if gtkabi/sdlabi is changed
2014-04-29 10:46:30 +02:00
COPYING
…
COPYING.LIB
…
coroutine-gthread.c
block: move include files to include/block/
2012-12-19 08:31:31 +01:00
coroutine-sigaltstack.c
Merge remote-tracking branch 'kwolf/for-anthony' into staging
2013-02-26 07:44:39 -06:00
coroutine-ucontext.c
Fix warnings suppressors to honor --disable-werror
2013-04-17 10:28:04 -05:00
coroutine-win32.c
block: move include files to include/block/
2012-12-19 08:31:31 +01:00
cpu-exec.c
cpu-exec: Unlock tb_lock if we longjmp out of code generation
2014-04-04 18:29:25 +01:00
cpus.c
misc: Use cpu_physical_memory_read and cpu_physical_memory_write
2014-04-27 13:04:18 +04:00
cputlb.c
cputlb: Change tlb_set_page() argument to CPUState
2014-03-13 19:52:47 +01:00
device_tree.c
device_tree: qemu_fdt_setprop: Rename val_array arg
2013-12-20 01:58:12 +01:00
device-hotplug.c
hw/boards: Convert current_machine to MachineState
2014-03-12 20:13:02 +01:00
disas.c
disas: Implement disassembly output for A64
2014-02-08 14:50:48 +00:00
dma-helpers.c
dma-helpers: Initialize DMAAIOCB in_cancel flag
2014-04-04 19:36:39 +02:00
dump.c
dump: add 'query-dump-guest-memory-capability' command
2014-02-28 11:52:03 -05:00
exec.c
exec: Fix CPU rework fallout
2014-03-19 19:47:15 +01:00
gdbstub.c
exec: Change cpu_breakpoint_{insert,remove{,_by_ref,_all}} argument
2014-03-13 19:20:48 +01:00
HACKING
HACKING: Document vaddr type usage
2013-07-23 02:41:31 +02:00
hmp-commands.hx
HMP: support specifying dump format for dump-guest-memory
2014-04-25 11:18:33 -04:00
hmp.c
HMP: support specifying dump format for dump-guest-memory
2014-04-25 11:18:33 -04:00
hmp.h
monitor: Add device_add and device_del completion.
2014-04-25 09:37:12 -04:00
iohandler.c
iohandler: switch to GPollFD
2013-02-21 16:17:31 -06:00
ioport.c
portio: Allow to mark portio lists as coalesced MMIO flushing
2013-10-17 17:24:15 +02:00
iothread.c
iothread: make IOThread struct definition public
2014-04-04 20:48:02 +02:00
kvm-all.c
Revert "fix return check for KVM_GET_DIRTY_LOG ioctl"
2014-04-14 15:40:02 +01:00
kvm-stub.c
Revert "KVM: Split QEMUMachine typedef into separate header"
2014-03-13 03:49:48 +01:00
LICENSE
LICENSE: clarify
2013-08-12 09:15:12 -05:00
main-loop.c
main-loop: Suppress "I/O thread spun" warnings for qtest
2014-03-13 21:36:50 +01:00
MAINTAINERS
MAINTAINERS: Add qemu-img/io to block subsystem
2014-04-25 18:05:05 +02:00
Makefile
Makefile: add qga-vss-dll-obj-y to nested variables
2014-04-07 14:39:19 -05:00
Makefile.objs
iothread: add I/O thread object
2014-03-13 14:42:24 +01:00
Makefile.target
build: softmmu targets do not have a "main.o" file
2014-02-20 13:14:18 +01:00
memory_mapping.c
cpu: Use QTAILQ for CPU list
2013-09-03 12:25:55 +02:00
memory.c
memory_region_present: return false if address is not found in child MemoryRegion
2014-03-09 21:09:37 +02:00
migration-exec.c
aio / timers: Untangle include files
2013-08-22 19:10:27 +02:00
migration-fd.c
aio / timers: Untangle include files
2013-08-22 19:10:27 +02:00
migration-rdma.c
rdma: rename 'x-rdma' => 'rdma'
2014-02-25 14:30:28 +01:00
migration-tcp.c
aio / timers: Untangle include files
2013-08-22 19:10:27 +02:00
migration-unix.c
aio / timers: Untangle include files
2013-08-22 19:10:27 +02:00
migration.c
migration: add more traces
2014-03-27 15:19:00 +05:30
module-common.c
module: implement module loading
2014-02-20 13:14:18 +01:00
monitor.c
monitor: fix qmp_getfd() fd leak in error case
2014-04-25 11:41:41 -04:00
nbd.c
nbd: move socket wrappers to qemu-nbd
2014-02-21 21:02:23 +01:00
os-posix.c
oslib-posix: Fix build on FreeBSD
2014-03-13 14:34:16 +00:00
os-win32.c
util: Split out exec_dir from os_find_datadir
2014-02-20 13:12:54 +01:00
page_cache.c
Fix two XBZRLE corruption issues
2014-02-25 14:30:28 +01:00
qapi-schema.json
block: Expose host_* drivers in blockdev-add
2014-04-25 18:05:06 +02:00
qdev-monitor.c
qerror.h: Remove QERR defines that are only used once
2014-04-25 09:19:59 -04:00
qdict-test-data.txt
Introduce QDict test data file
2009-09-04 09:37:34 -05:00
qemu-bridge-helper.c
qemu-bridge-helper: force usage of a very high MAC address for the bridge
2013-03-28 12:58:52 -05:00
qemu-char.c
char: restore read callback on a reattached (hotplug) chardev
2014-03-13 10:33:45 +01:00
qemu-coroutine-io.c
aio / timers: Untangle include files
2013-08-22 19:10:27 +02:00
qemu-coroutine-lock.c
coroutine: remove qemu_co_queue_wait_insert_head
2013-12-02 17:11:49 +01:00
qemu-coroutine-sleep.c
coroutine: add co_aio_sleep_ns() to allow sleep in block drivers
2013-10-30 12:22:09 +01:00
qemu-coroutine.c
coroutine: add ./configure --disable-coroutine-pool
2013-09-12 10:12:48 +02:00
qemu-doc.texi
doc: grammify "allows to"
2014-04-18 10:33:36 +04:00
qemu-file.c
migration: add more traces
2014-03-27 15:19:00 +05:30
qemu-img-cmds.hx
qemu-img: add -l for snapshot in convert
2013-12-04 15:19:00 +01:00
qemu-img.c
block: Add '--version' option to qemu-img
2014-04-29 10:36:35 +02:00
qemu-img.texi
Describe flaws in qcow/qcow2 encryption in the docs
2014-01-31 22:05:03 +01:00
qemu-io-cmds.c
qemu-io-cmds: Fixed typo in example for writev.
2014-03-19 09:39:41 +01:00
qemu-io.c
block: Add errp to bdrv_new()
2014-04-22 12:00:20 +02:00
qemu-log.c
qemu-log: default to stderr for logging output
2013-02-26 13:31:47 -06:00
qemu-nbd.c
block: Add errp to bdrv_new()
2014-04-22 12:00:20 +02:00
qemu-nbd.texi
qemu-nbd: add doc for option -f
2013-12-04 15:19:00 +01:00
qemu-options-wrapper.h
vl.c: In qemu -h output, only print options for the arch we are running as
2011-12-19 10:27:33 -06:00
qemu-options.h
vl.c: Move option generation logic into a wrapper file
2011-12-19 10:27:33 -06:00
qemu-options.hx
Merge remote-tracking branch 'remotes/mjt/tags/trivial-patches-2014-04-28' into staging
2014-04-28 13:43:17 +01:00
qemu-seccomp.c
seccomp: add shmctl(), mlock(), and munlock() to the syscall whitelist
2014-04-25 14:52:03 -03:00
qemu-tech.texi
qemu-tech.texi: update implemented xtensa features list
2012-11-29 13:00:52 -06:00
qemu-timer.c
timer: add timer_mod_anticipate and timer_mod_anticipate_ns
2013-10-17 17:31:00 +02:00
qemu.nsi
nsis: Improved support for parallel installation of 32 and 64 bit code
2013-11-07 07:02:44 +01:00
qemu.sasl
sasl: Avoid 'Could not find keytab file' in syslog
2014-03-15 13:54:18 +04:00
qmp-commands.hx
virtio-net: add vlan receive state to RxFilterInfo
2014-03-26 12:49:10 +02:00
qmp.c
qmp: object-add: Validate class before creating object
2014-04-25 11:08:34 -04:00
qtest.c
kvm: Add a new machine option kvm-type
2014-03-05 03:06:24 +01:00
README
Use qemu-project.org domain name
2013-10-11 09:34:56 -07:00
rules.mak
rules.mak: Fix per object libs extraction
2014-03-17 13:21:11 +01:00
savevm.c
qerror.h: Remove QERR defines that are only used once
2014-04-25 09:19:59 -04:00
spice-qemu-char.c
spice: hook qemu_chr_fe_set_open() event to ports
2014-02-03 11:05:15 +01:00
tcg-runtime.c
tcg: Implement multiword multiply helpers
2013-02-23 17:25:28 +00:00
tci.c
tci: Mask shift counts to avoid undefined behavior
2014-04-18 16:57:36 -07:00
thread-pool.c
Add a 'name' parameter to qemu_thread_create
2014-03-09 21:09:38 +02:00
thunk.c
exec: move include files to include/exec/
2012-12-19 08:31:31 +01:00
tpm.c
Use error_is_set() only when necessary
2014-02-17 11:57:23 -05:00
trace-events
s390x/kvm: rework KVM synchronize to tracing for some ONEREGS
2014-04-25 12:59:57 +02:00
translate-all.c
page_check_range: don't bail out early after unprotecting page
2014-04-04 18:16:03 +01:00
translate-all.h
translate-all: Change tb_check_watchpoint() argument to CPUState
2014-03-13 19:20:48 +01:00
user-exec.c
tcg-aarch64: Properly detect SIGSEGV writes
2014-04-16 12:12:32 -04:00
VERSION
Open 2.1 development tree
2014-04-17 20:39:32 +01:00
version.rc
Use qemu-project.org domain name
2013-10-11 09:34:56 -07:00
vl.c
vl: avoid closing stdout with 'writeconfig'
2014-04-28 08:55:31 +04:00
vmstate.c
savevm: Ignore minimum_version_id_old if there is no load_state_old
2014-05-05 22:15:03 +02:00
xbzrle.c
xbzrle.c: Avoid undefined behaviour with signed arithmetic
2014-04-18 10:33:36 +04:00
xen-all.c
kvm: Add a new machine option kvm-type
2014-03-05 03:06:24 +01:00
xen-mapcache.c
hw: move headers to include/
2013-04-08 18:13:10 +02:00
xen-stub.c
kvm: Add a new machine option kvm-type
2014-03-05 03:06:24 +01:00

README 

Read the documentation in qemu-doc.html or on http://wiki.qemu-project.org

- QEMU team
Description
Mirror of https://github.com/openSUSE/qemu
Readme 658 MiB
Languages
C 82.6%
C++ 6.5%
Python 3.3%
Dylan 2.9%
Shell 1.6%
Other 2.9%